Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a400303b-a366-3b94-8f72-419cb8f7387b.roa
File: a400303b-a366-3b94-8f72-419cb8f7387b.roa (raw, json)
Hash identifier: euc+EECkHm0wsS/0Uz+0oQXVFtTKbQGaCcyuSOXqqQM=
Subject key identifier: 26:36:E7:1C:DA:8A:C9:E9:B8:0C:E1:59:4F:96:38:F8:5A:04:EE:B1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285849393E9300CE94502CA65B61C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a400303b-a366-3b94-8f72-419cb8f7387b.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 396551
IP address blocks: 2001:500:120::30/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:93:00:ce:94:50:2c:a6:5b:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=711b69f2-8895-4310-aaad-d7252fdf1d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c3:99:fb:bd:b3:99:ce:39:14:f5:00:fa:39:
6b:b5:58:d6:9d:64:60:df:6e:19:3f:2c:e9:cd:79:
52:70:e7:b8:86:a5:2c:55:7c:1d:a6:22:ef:44:b4:
86:b0:d3:23:09:34:a1:93:0d:ca:32:ed:dc:23:90:
eb:08:55:8a:58:e8:a0:93:0d:cc:23:fc:00:4e:68:
55:db:5f:64:4e:a4:d4:b6:6b:9e:36:2c:2d:d9:b5:
4a:e5:cb:d0:9e:57:08:ca:c6:18:c8:ae:77:6c:0b:
c1:f2:e6:79:d7:25:a7:8f:06:4e:f1:ad:7d:46:c9:
24:78:0e:9f:e7:cd:14:9d:bb:77:79:be:9c:bd:6e:
58:55:6c:d9:e0:81:32:9b:7a:07:e5:6e:6f:69:56:
6d:48:9c:66:e9:6f:ad:2e:b0:89:76:53:08:87:2f:
eb:39:76:61:cd:d9:fc:59:18:dc:4e:f0:6a:98:1f:
bd:71:2d:25:3a:28:48:ac:73:3a:7c:47:33:7c:b6:
0b:bb:49:95:33:92:f6:0e:28:a3:4f:92:19:e4:e4:
9a:0c:6e:83:b9:4c:3f:7b:71:ab:09:34:66:31:0e:
03:35:ab:1d:fc:c4:49:02:74:00:b0:d2:95:13:eb:
8c:08:42:40:90:88:63:99:39:12:50:27:e0:5e:d0:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:36:E7:1C:DA:8A:C9:E9:B8:0C:E1:59:4F:96:38:F8:5A:04:EE:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a400303b-a366-3b94-8f72-419cb8f7387b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:120:0:0:0:0:30/128
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:2b:bc:47:6b:dd:d1:82:0f:9f:01:dd:59:76:fe:d1:c1:0d:
df:46:c9:c7:4a:dd:a4:ba:7c:12:69:8e:4f:0c:8c:c5:19:7f:
be:b1:db:49:8b:f9:17:b7:bd:e8:71:4b:f3:40:3f:58:85:84:
54:51:9e:02:36:6d:98:8a:c3:0a:90:86:e1:9b:b3:b6:3b:30:
2f:af:95:06:97:75:8a:d2:92:25:63:45:1f:68:df:6f:f7:c4:
15:3e:3b:b9:9a:29:61:cf:b0:5e:e0:cb:81:05:d3:e8:9a:ba:
9d:e1:43:52:40:98:03:68:9b:7d:b1:97:a4:c8:19:ff:9f:73:
76:c9:02:74:8d:46:39:5a:c8:f1:ff:66:0b:95:48:9f:d0:29:
6a:ce:62:67:5e:4e:ba:02:e8:a9:4d:9c:0a:22:f1:a3:f7:2e:
5a:1f:ee:bb:27:2d:c3:b6:15:45:ab:c0:d4:95:c2:50:43:96:
f8:64:ad:5f:2b:b3:25:6e:89:1f:ae:d4:be:d7:de:67:b8:80:
aa:f6:00:bb:cf:0d:29:c9:e7:a8:be:39:44:10:24:eb:9b:cc:
7e:16:b2:0b:49:e5:49:c3:69:b0:3b:99:da:d9:bb:fd:fa:96:
f6:48:2d:75:d2:48:32:a6:6c:27:03:45:44:66:a2:11:d6:b3:
70:26:78:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:02:10 2025 by rpki-client